http://bugzilla.suse.com/show_bug.cgi?id=1167068 http://bugzilla.suse.com/show_bug.cgi?id=1167068#c5 --- Comment #5 from Swamp Workflow Management --- SUSE-SU-2020:14356-1: An update that solves one vulnerability and has one errata is now available. Category: security (important) Bug References: 1167068,1170558 CVE References: CVE-2020-12137 Sources used: SUSE Linux Enterprise Server 11-SP4-LTSS (src): mailman-2.1.15-9.6.20.1 SUSE Linux Enterprise Point of Sale 11-SP3 (src): mailman-2.1.15-9.6.20.1 SUSE Linux Enterprise Debuginfo 11-SP4 (src): mailman-2.1.15-9.6.20.1 SUSE Linux Enterprise Debuginfo 11-SP3 (src): mailman-2.1.15-9.6.20.1 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1167068 http://bugzilla.suse.com/show_bug.cgi?id=1167068#c7 ming li changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |mli@suse.com --- Comment #7 from ming li --- I'm testing this bug. After the program is upgraded to the new version(mailman-2.1.17-3.16.1), I'll configure mailman according to the method in /usr/share/doc/packages/mailman/README.SUSE file, and report the following problems when executing the /usr/lib/mailman/bin/check_perms command: s12sp5:~ # /usr/lib/mailman/bin/check_perms /var/lib/mailman/archives bad group (has: www, expected mailman) directory permissions must be 02775: /var/lib/mailman/archives /var/lib/mailman/archives/private bad group (has: www, expected mailman) directory permissions must be 02770: /var/lib/mailman/archives/private Problems found: 4 Re-run as mailman (or root) with -f flag to fix The four problems checked out are the parts of the mailman.spec file where the code has changed. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1167068 http://bugzilla.suse.com/show_bug.cgi?id=1167068#c9 --- Comment #9 from ming li --- (In reply to ming li from comment #8)

When I follow the /usr/share/doc/packages/mailman/README.SUSE file configuration, I can't create a mailing list in the new version of mailman(mailman-2.1.17-3.16.1), but there is no problem in the previous version.(mailman-2.1.17-3.11.1)

Recurrence steps: s12sp5:~ # /usr/lib/mailman/bin/mailman-generate-sysconfig Installing new /usr/lib/mailman/Mailman/mm_cfg.py No changes for /etc/mailman/mailman.mail-gid No changes for /etc/mailman/mailman.cgi-gid

s12sp5:~ # /usr/lib/mailman/bin/mmsitepass New site password: Again to confirm password: Password changed.

s12sp5:~ # vi /etc/postfix/main.cf Add "alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases"

s12sp5:~ # systemctl restart postfix

s12sp5:~ # /usr/lib/mailman/bin/newlist mailman Enter the email of the person running the list: root@test.qam.suse Initial mailman password: Create a new, unpopulated mailing list.

Usage: /usr/lib/mailman/bin/newlist [options] [listname [listadmin-addr [admin-password]]] ... Note that listnames are forced to lowercase.

Illegal list name: mailman@s12sp5

s12sp5:~ # /usr/lib/mailman/bin/list_lists No matching mailing lists found

s12sp5:~ # /usr/lib/mailman/bin/list_admins mailman No such list: mailman

I'm sorry. It's my fault. There was a mistake in the test process. There is no problem! Please ignore. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.suse.com/show_bug.cgi?id=1167068 Wolfgang Frisch changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|mcepl@suse.com |security-team@suse.de -- You are receiving this mail because: You are on the CC list for the bug.